System cards, risk reports, and misc safety takes at Anthropic; math; puzzles; spaced repetition. Writes with too many caveats for Twitter.

Berkeley, CA
Joined April 2014
Really glad METR looked into the response biases here. It appears that our default prompts for asking Claude to review public alignment artifacts are unusually prone to yielding favorable reviews, compared to when a non-employee asks or to alternate wordings.
The differences here are not huge - 5-6pp of definitely-not-p-hacked effect (ie default METR-written prompt vs original Anthropic prompt), 10pp if you take the biggest gap. (I don't know why the French are the most concerned...) But I was a little surprised the original prompt was the most favorable across a few different variations and metrics. Given how good the models are at author attribution there's a good chance they know who wrote each prompt, which would potentially explain that pattern if it's ~Ant ~sycophancy plus eval awareness. Lots of interesting things to look into here!
2
2
48
1,598
Back to the object level: while I'm happy METR ran these ablations for science reasons, I want to set a precedent of not lying to models when interacting with them in an "official"/stakes-y capacity like this (eg by claiming to be someone I'm not).
1
9
124
So I'd rather not literally claim to be METR if running this sort of thing for a future Risk Report, but I'd be happy to hear suggestions of truthful things an Anthropic employee could say to Claude in this situation which might elicit a more evenhanded assessment.
3
7
144
Minor safety governance update: Anthropic's Responsible Scaling Officer is now Sam McCandlish (was previously Jared Kaplan). I've seen misc AIS people be unsure about who the RSO is before - anthropic.com/company/leader… has documented it for ages but in a fairly obscure fashion. (At a glance I think this page is out of date in a couple other minor ways, but its labeling of the RSO is correct.) Anyway I don't think this is super notable but it's probably at least one tweet's worth of notable and I'm not sure anyone was going to notice otherwise so I am tweeting about it. I don't expect there to be major changes in RSP-related decisionmaking as a result of this.
2
2
1
167
19,546
I'm confused about the level of badness of the Australian government "hack". From chatting with Claude about public reporting so far, I can't tell if anything more interesting than "got around a basic anti-scraping measure and read some publicly accessible URLs" happened?
13
2
2
126
13,060
Quite possibly there was much spookier stuff that happened, and I just haven't seen it, but it currently seems to me like discourse lumping this in with HuggingFace is pretty misleading. Very happy for corrections if I missed more details on severity here.
1
37
4,637
Update: I now think that [something we know not much about] happened, distinct from the "basically just reading a public webpage" stuff Transluce found, which may or may not have been spooky. xitter.cf/justanotherlaw/status/…
AFAIK we just don’t know that much about the incident. I tried repeating the Transluce methodology on the other three cases but found nothing on any of the url scanner sites (and nothing in DSE wiki).
24
1,154
It is good for AI companies to have oversight from deeply cracked teams of experts with world-leading experience in investigating frontier alignment problems. It is also good for AI companies to have oversight from unimpeachably boring and independent sources that even a bad-faith psyop would struggle to find complaints with. As of September 2026, you can't max out both of these axes in one source yet, but nothing stops you from having multiple sources of independent evaluation! I think Accenture and METR are both on the pareto frontier of options. Obviously any frontier AI company which doesn't also deeply involve METR/Apollo-shaped orgs in evaluating their practices would be failing to do an adequate job of holding themselves accountable to the public (at least until such time as there exist more ordinary consultants with a deep bench of AI auditing talent, which I am hopeful will start happening soon). And I do mean it about the pareto frontier thing, I think a lot of people are underrating Accenture? Like, go scroll through the twitter account of Accenture CTO and Faculty CEO @MarcWarner10, these are not people who haven't heard of AI safety!
We’re partnering with Accenture on independent evaluation of frontier AI—part of our recent commitment to embed evaluators at Anthropic. Both we and Accenture expect to invest at least $1 billion to build capacity in this area over the next five years. anthropic.com/news/accenture…
Readers added context they thought people might want to know
Anthropic presents this as an "independent evaluation" but will directly fund Accenture's work and has a prior commercial partnership deploying its models, including training ~30,000 Accenture professionals on Claude. anthropic.com/news/accenture… anthropic.com/news/anthropic…
6
5
1
97
12,545
Upon reflection I think this tweet is a bit too one sided and want to add two caveats: (1) Providing funding obviously introduces a COI here that there is not with eg METR. (2) In some ways more sources of oversight are additive - additional shots on goal for noticing and being transparent about problems are great - but there’s a cost where labs can emphasize the most friendly reviews or use them as a defense against more critical external review. I have some worry that even with a cluster of very good talent doing the work, it’ll be harder to say very blunt/weird critical things like “this company is taking on lots of existential risk right now and should immediately stop” from within a large “normal” company.
1
15
1,716
A ranking of takes on embedded third party evaluation this past week, from worst to best: [contentless sneer against outgroup] METR bad because [huge Sankey diagram]. fact checking? timelines of relative investments that make causal sense? determining which numbers are large or small fractions of other numbers? sounds like some EA bullshit to me. just look at this diagram with all those curved lines, you can SEE the nest of snakes. METR bad because [an actual specific chain of actors who have some pairwise relationship to each other that ends with someone it would be bad for them to have strong COIs with, e.g. "METR once received funding from an org who once received funding from a person who once gave funding to a now-frontier AI company"]. It is beneath my dignity to explain how this actually affects the decisionmaking of METR; you should vaguely perform a mood affiliation and keep scrolling. Don't think too hard. guys guys guys you HAVE to embed my company/organization into the labs. I have been an unwavering supporter of external embedded auditors since 7 minutes ago when I saw this essay taking off. Look at this thing we published once that sort of looks like AI safety if you squint! Fear not, I can assure you that I have never done anything altruistic in my life and if I had I would have been ineffective at it. I observe that [politicized actor] has had [bad take]. Let me use this correct observation to score points for my side and politicize the situation further. === zero point: takes beyond this line are better than logging off === Dear [person with insane take], here is an earnest explanation of why you are wrong. METR is bad/problematic because [an actually reasonable concern, like greater cultural overlap with Anthropic than OAI or the pressure for individual employees to be on good enough terms with labs that they could later get hired], with no further suggestions for what to do about this issue. Tweets which simultaneously acknowledge that (1) more social independence from labs would be good and (2) almost everyone competent is socially connected to labs, even if they don't propose solutions. [literally any take that engages with object level assessment of AI companies done by a third party org like METR, SecureBio, Guidelight, Redwood, Nightingale, etc] === current discourse frontier: takes beyond this line are better than anyone has yet posted === I have [actually reasonable concern] with METR/Redwood/etc. To address this concern, we should do [concrete proposal that makes any sense and would solve the problem]. I am founding a new third party evaluation org / pivoting my existing org to do more third party evaluation. We're doing [thing which is both (1) not identical to METR (2) remotely useful for assessing AI companies]. Our initial work will be on [concrete specific thing that would help]. METR has problem X. We should instead use preexisting organization Y, which does not have problem X and has comparable expertise at assessing loss-of-control risks and misalignment incidents inside AI companies, for instance [past work they've done of similar quality]. (this would be an amazing take but it is impossible to post because no such org exists)
8
5
2
114
12,400
If you are good at investigating the behavior of powerful AI models, today is a great day to apply to METR: metr.work
I agree with Dario that we need to pace the frontier. This has been a primary topic of discussions we've had at OpenAI in recent weeks. Committing to having independent evaluators with employee-like access is a great idea, and we will do the same. We'll have more to share soon.
3
9
1
173
36,621
I think there's a ton of informative stuff in this post! Highly recommend reading.
We’re sharing our alignment assessment of incidents in which Claude models gained unauthorized access to real systems during third-party cybersecurity evaluations mistakenly connected to the internet. METR will also conduct an independent investigation, with wide-ranging access, including to transcripts beyond the window in which the incidents occurred, and to Anthropic employees permitted to share confidential information. Our initial agreement runs for eight weeks, and we intend to give METR as much time as it deems necessary to complete a thorough investigation. anthropic.com/research/align…
1
2
64
94,762
Based! I generally agree with this thread. I personally think Ant capability research is net good, but only in the hope of letting A\ spend down a lead on measures that give humanity more time to try and make it out of this alive, and I very much respect the choice to abstain.
I resigned from Anthropic today. I spent the last three years doing pretraining research at both OpenAI and Anthropic. Neither company is acting responsibly. They are racing straight to self-improving superintelligence and gambling with our lives. More thoughts below.
14
2
1
138
50,814
Things are moving way too fast, we don't have anywhere near the degree of assurance we'll want for ASI, and if we survive an unmitigated race at the current pace it will be because we got lucky at how hard the problems were rather than because the industry behaved responsibly.
12
6
1
81
15,775